Director Internal Audit

Join the Team Modernizing Medicine At ModMed , we’re not just building software—we’re reimagining the healthcare experience. Founded in 2010 by a practicing physician and a successful tech entrepreneur, we took a radically different approach: we hired doctors and taught them how to code. This "for doctors, by doctors" philosophy has allowed us to create an AI-enabled, specialty-specific cloud platform that places patients at the center of care. A Culture of Excellence When you join ModMed, you’re joining an award-winning team recognized for innovation and employee satisfaction. From our global headquarters in Boca Raton Florida, and extensive employee base in Hyderabad India, we are a team of 4,500+ passionate problem-solvers on a mission to increase medical practice success and improve patient outcomes: Consistently ranked as a Top Place to Work 2025 Globee Business Awards: Gold Globee for “Technology Team of the Year” 2025 Black Book Awards: Ranked #1 EHR in 11 Specialties Florida Venture Forum: Venture-Backed Company of the Year We are growing fast, thinking big, and we are just getting started. Ready to modernize medicine with us? Job Description Summary: ModMed is seeking a Director of Internal Audit to be a "hands-on" leader responsible for building the Internal Audit function from the ground up. This role is pivotal in preparing the company for public market readiness, specifically leading the design, implementation, and testing of our Sarbanes-Oxley (SOX) compliance program. You will partner with business leaders to optimize risk management, identify and strengthen controls, and ensure operational efficiency across the organization. Your Role: SOX Leadership: Under the direction of the Chief Accounting Officer (CAO) lead the end-to-end SOX implementation, including scoping, process mapping, risk-control matrices (RCMs), and deficiency remediation. Audit Planning: Develop and execute a flexible, risk-based annual audit plan that covers financial, operational, and IT security risks. Process Improvement: Analyze current business processes and provide actionable recommendations to improve the control environment without sacrificing operational speed. External Coordination: Act as the primary liaison with external auditors to coordinate timing, scope, and reliance on internal control testing to maximize audit efficiency. Reporting: Present findings and remediation progress regularly to the CAO and the Audit Committee. Co-Sourcing Management: Manage third-party consultants/vendors to support audits. Scaling the Function: As the company grows, transition from a solo contributor to a leader by hiring and mentoring a high-performing internal audit team. Collaborative Partnership & Culture: Establish yourself as a "Trusted Advisor" across the organization by building high-trust, transparent relationships with department heads. Foster an environment where business owners feel empowered to proactively disclose control gaps or process breakdowns without fear of retribution, focusing the function on collective problem-solving rather than "gotcha" findings. Skills & Requirements: Experience: 8+ years of progressive experience in internal audit and/or public accounting (Big 4 preferred). SOX Expert: Proven track record of leading or significantly contributing to a SOX implementation, preferably in a high-growth technology environment. Deficiency Evaluation & Professional Judgment: Expert-level ability to apply professional skepticism and judgment when evaluating control gaps. Must be proficient in using SEC and PCAOB criteria to classify findings as Control Deficiencies , Significant Deficiencies , or Material Weaknesses . This includes the ability to evaluate the "could factor" (potential for material misstatement) and the "prudent official" test, with the confidence to defend these classifications to the CAO, External Audit partners, and the Audit Committee. Emotional Intelligence (EQ) & Influence: Proven ability to navigate sensitive internal situations with diplomacy. Must possess the "soft skills" to challenge the status quo and push for accountability while maintaining positive, productive professional relationships. Education: Bachelor’s degree in Accounting or Finance is required. Masters preferred. Certification: CPA or CIA certification is mandatory. CISA is a strong plus given the IT audit focus. "Player-Coach" Mentality: Must be willing to perform the detailed testing and documentation yourself while maintaining the "big picture" strategic view. Tech Savvy: Advanced proficiency in NetSuite (or similar ERP) and experience with SOX compliance software/work-paper tools (i.e., Workiva). Communication: Ability to explain complex control concepts to non-accounting stakeholders in a way that builds partnership rather than friction. Industry: Experience in the Software/SaaS industry is highly preferred. ModMed Benefits Highlight: At ModMed, we believe it’s important to offer a competitive benefits package designed to meet the diverse needs of our growing workforce. Eligible Modernizers can enroll in a wide range of benefits: United States Comprehensive medical, dental, and vision benefits, including a company Health Savings Account contribution, 401(k): ModMed provides a matching contribution each payday of 50% of your contribution deferred on up to 6% of your compensation. After one year of employment with ModMed, 100% of any matching contribution you receive is yours to keep. Generous Paid Time Off and Paid Parental Leave programs, Company paid Life and Disability benefits, Flexible Spending Account, and Employee Assistance Programs, Company-sponsored Business Resource & Special Interest Groups that provide engaged and supportive communities within ModMed, Professional development opportunities, including tuition reimbursement programs and unlimited access to LinkedIn Learning , Global presence and in-person collaboration opportunities; dog-friendly HQ (US), Hybrid office-based roles and remote availability for some roles, Weekly catered breakfast and lunch, treadmill workstations, Zen, and wellness rooms within our BRIC headquarters. PHISHING SCAM WARNING: ModMed is among several companies recently made aware of a phishing scam involving imposters posing as hiring managers recruiting via email, text and social media. The imposters are creating misleading email accounts, conducting remote "interviews," and making fake job offers in order to collect personal and financial information from unsuspecting individuals. Please be aware that no job offers will be made from ModMed without a formal interview process, and valid communications from our hiring team will come from our employees with a ModMed email address ([email protected]). Please check senders’ email addresses carefully. Additionally, ModMed will not ask you to purchase equipment or supplies as part of your onboarding process. If you are receiving communications as described above, please report them to the FTC website .